Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20098/1WTWQszzS59mHMwcUmYF5UHeeXM.roa
File:                     1WTWQszzS59mHMwcUmYF5UHeeXM.roa (raw, json)
Hash identifier:          R5oXxA9Aswb2/7SwN+SePxaahWLpRSqiv+cmE0ApaFI=
Subject key identifier:   D5:64:D6:42:CC:F3:4B:9F:66:1C:CC:1C:52:66:05:E5:41:DE:79:73
Certificate issuer:       /CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
Certificate serial:       0F
Authority key identifier: DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/1WTWQszzS59mHMwcUmYF5UHeeXM.roa
Signing time:             Tue 31 Mar 2026 08:46:39 +0000
ROA not before:           Tue 31 Mar 2026 08:46:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131982
IP address blocks:        202.226.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
        Validity
            Not Before: Mar 31 08:46:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D564D642CCF34B9F661CCC1C526605E541DE7973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:76:3a:80:4b:2d:18:9f:a5:8e:6b:47:82:
                    76:49:c7:de:8a:77:e8:36:01:46:59:0e:ec:c8:19:
                    a5:54:8f:c9:1b:fe:db:25:8c:82:20:35:3e:57:1b:
                    58:5b:26:24:36:3f:20:c9:ce:f8:e8:e1:8b:f3:cd:
                    3c:1e:ac:dc:58:09:d5:6f:18:2e:32:81:e6:69:51:
                    aa:68:57:fa:d0:05:c8:7d:9c:25:da:53:d5:3c:87:
                    ae:50:43:bb:f4:4f:59:77:70:71:c9:8e:d7:86:41:
                    f6:31:3e:a7:c5:0b:f2:7b:96:0d:a3:11:78:02:50:
                    06:b0:0f:6c:92:9d:44:2d:7b:6a:fd:c8:13:f5:74:
                    c0:2e:50:1f:3d:4c:ed:64:35:89:e0:a5:f9:9a:d5:
                    87:53:9b:a8:6d:1e:c8:cd:58:b0:98:7f:92:d2:6c:
                    5f:40:8b:d1:2e:4d:85:a5:36:5d:55:46:5f:a3:46:
                    3e:ba:7d:b3:e5:51:14:35:6b:02:7a:ef:95:f2:fb:
                    e8:b1:4f:47:b6:45:c2:a5:c7:7e:87:8a:26:8c:05:
                    93:5c:19:fe:56:48:28:80:a0:f2:12:ef:65:90:06:
                    93:b7:29:51:d6:27:e0:f7:58:43:03:44:b9:d8:dd:
                    86:aa:ed:d5:e6:60:65:91:da:8c:b2:b6:07:63:e5:
                    5b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:64:D6:42:CC:F3:4B:9F:66:1C:CC:1C:52:66:05:E5:41:DE:79:73
            X509v3 Authority Key Identifier:
                keyid:DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/1WTWQszzS59mHMwcUmYF5UHeeXM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:67:e6:39:cb:38:fa:94:76:f7:7a:32:8a:90:5e:26:37:
         80:00:76:45:8e:3b:93:db:91:2a:1a:9b:ab:78:d0:e1:7f:d9:
         27:5e:1c:6a:ec:36:bc:4b:51:80:77:98:7f:03:58:f5:d3:ac:
         e1:94:de:08:a0:c2:d2:80:2e:1f:b0:19:3f:b5:3b:85:80:09:
         d2:1a:67:77:12:58:66:77:89:87:a8:05:47:e2:c2:c5:e4:ae:
         ed:a9:ba:2c:36:65:80:fa:31:5b:36:25:28:bc:d2:81:77:26:
         1f:18:c9:b5:44:85:bb:e0:f1:07:96:95:de:f4:82:5f:44:53:
         01:45:68:73:f8:f1:4c:df:6f:24:1f:07:c2:0f:a6:18:4f:2a:
         5e:b5:6b:a1:3f:19:bb:1e:a7:8c:d2:23:a3:be:87:32:b0:db:
         91:c7:13:c4:60:b4:00:9b:5a:60:4d:f7:92:7b:c7:86:f3:f9:
         3a:51:28:32:c5:67:6f:34:94:ae:b8:ca:58:51:08:59:cb:2f:
         e0:f6:7e:b5:1d:94:dc:d4:7d:73:71:4a:98:b7:75:de:c1:36:
         fa:f5:de:87:76:e4:f4:4f:30:c3:d5:0e:28:a0:56:a0:58:a5:
         f8:2b:5d:4a:7c:9a:7a:93:2e:b6:7f:83:46:b2:f3:b8:e3:fd:
         c4:e9:48:b2
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQjNC
ODhBRTREN0E4QzQ0NDZGOUE4MkUxMkM2RkQ5MTZCRTg0NUFDMB4XDTI2MDMzMTA4
NDYzOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDU2NEQ2NDJDQ0YzNEI5
RjY2MUNDQzFDNTI2NjA1RTU0MURFNzk3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM4IdjqASy0Yn6WOa0eCdknH3op36DYBRlkO7MgZpVSPyRv+2yWM
giA1PlcbWFsmJDY/IMnO+Ojhi/PNPB6s3FgJ1W8YLjKB5mlRqmhX+tAFyH2cJdpT
1TyHrlBDu/RPWXdwccmO14ZB9jE+p8UL8nuWDaMReAJQBrAPbJKdRC17av3IE/V0
wC5QHz1M7WQ1ieCl+ZrVh1ObqG0eyM1YsJh/ktJsX0CL0S5NhaU2XVVGX6NGPrp9
s+VRFDVrAnrvlfL76LFPR7ZFwqXHfoeKJowFk1wZ/lZIKICg8hLvZZAGk7cpUdYn
4PdYQwNEudjdhqrt1eZgZZHajLK2B2PlW+cCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBTVZNZCzPNLn2YczBxSZgXlQd55czAfBgNVHSMEGDAWgBTbO4iuTXqMREb5qC4S
xv2Ra+hFrDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwOTgvMnp1SXJrMTZqRVJHLWFndUVzYjlrV3ZvUmF3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnp1SXJrMTZqRVJHLWFndUVzYjlr
V3ZvUmF3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDk4LzFXVFdRc3p6UzU5bUhNd2NVbVlGNVVIZWVYTS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALK4jAwDQYJKoZIhvcNAQELBQAD
ggEBAByZZ+Y5yzj6lHb3ejKKkF4mN4AAdkWOO5PbkSoam6t40OF/2SdeHGrsNrxL
UYB3mH8DWPXTrOGU3gigwtKALh+wGT+1O4WACdIaZ3cSWGZ3iYeoBUfiwsXkru2p
uiw2ZYD6MVs2JSi80oF3Jh8YybVEhbvg8QeWld70gl9EUwFFaHP48UzfbyQfB8IP
phhPKl61a6E/Gbsep4zSI6O+hzKw25HHE8RgtACbWmBN95J7x4bz+TpRKDLFZ280
lK64ylhRCFnLL+D2frUdlNzUfXNxSpi3dd7BNvr13od25PRPMMPVDiigVqBYpfgr
XUp8mnqTLrZ/g0ay87jj/cTpSLI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:18 2026 by rpki-client